WHAT IS CLAIMED IS: 
Encryption: 

1 . A method, \comprising: 
obtaining alhint; 
obtaining a password; 

performing a hashing algorithm on the hint and the password to generate a 
key; 1 

encrypting data using the key; and 

sending the encrypted data to a server for storage, 

2. The method onclaim 1, wherein the step of performing a hashing algorithm 
includes hashing the password. 

3. The method of c aim 1, 

wherein the step of performing a hashing algorithm includes hashing the 
password to derive a first secret, hashing the first secret to derive a second secret, 
hashing the hint and the\ first secret to generate an intermediate index, and hashing 
the intermediate index and the second secret to generate the key. 
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1 4. A system, comprising: 

2 a user interface\for obtaining a password; 

3 a key generator coupled to the user interface for performing a hashing 

4 algorithm on a hint andlthe password to generate a key; 

5 an encryption engine coupled to the key generator for encrypting data using 

6 the key; and 

7 a communicationk module coupled to the engine for sending the encrypted 

8 data to a server for storage. 

1 5. The system of claiip 4, further comprising a hint generator for generating 

2 the hint. 



1 6. 



The system of claimU, wherein the key generator hashes the password. 
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7. The system of claim 4, wherein the key generator hashes the password to 
derive a first secret, hashes the first secret to derive a second secret, hashes the hint 
and the first secret to generate an intermediate index, and hashes the intermediate 
index and the second secret tc» generate the key. 



8 



A system, comprising 
means for obtaining a 
means for obtaining a 
means for performing 
generate a key; 

means for encrypting 
means for sending thd 



lint; 

password; 

a hashing algorithm on the hint and the password to 

ata using the key; and 

encrypted data to a server for storage. 
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1 9. The system of ^laim 8, wherein the system includes code stored on a 

2 computer-readable storage medium. 

1 10. The system of cla\m 8, wherein the system includes code embodied in a 

2 carrier wave. 



1 11. A method, comprising: 

2 receiving a request t6 store encrypted data from a client; 

3 sending an encryptioi^^ downloadable for deriving a key to encrypt data to 

4 the client; 

5 receiving encrypted deita that was encrypted by the encryption 

6 downloadable from the client;! and 

7 obtaining a hint, corresponding to the encrypted data and needed for 

8 regenerating the key; and 

9 storing the hint and the encrypted data. 



1 12. A system, comprising: 

2 an encryption downloadajble for deriving an encryption key from a 

3 password and a hint; 

4 a web server for interfacing with a client, for sending the encryption 

5 downloadable to the client, ana for receiving encrypted data that was encrypted by 

6 the encryption downloadable f om the client; and 

7 memory coupled to the web server for storing a hint corresponding to the 

8 encrypted data and needed to regenerate the key from the client and the encrypted 

9 data. 
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Client-side decryption 
13. A method, comprising: 

obtaining a password; 

receiving encrypted data and a hint corresponding to the encrypted data 



from a server; and 

performing a h 



shing algorithm on the password and the hint to generate a 



key for decrypting thel encrypted data. 



1 14, The method of dlaim 13, wherein the step of performing a hashing 

2 algorithm includes hashing the password. 
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15. A system, comprising: 

a user interface for obtaining a password; 

a communications module for receiving the encrypted data and a hint 
corresponding to the encrj pted data from a server; 

a key generator for performing a hashing algorithm on the password and the 
hint to generate a key for c ecrypting the encrypted data. 

16. A system, comprising: 



means for obtainin 
means for receivin, 



; a password; 

encrypted data and a hint corresponding to the 
encrypted data from a server; and 

means for performing a hashing algorithm on the password and the hint to 
generate a key for decrypting the encrypted data. 



1 17. The system of claim 

2 computer-readable storage 



16, wherein the system includes code stored on a 
medium. 
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1 18. The system of \\aim 16, wherein the system includes code embodied in a 

2 carrier wave. 

1 19. A method, compri^ng: 

2 receiving identificamon of encrypted data; 

3 sending a decryption downloadable for deriving a key from a password and 

4 a hint to a client; and 

5 sending a hint correspbnding to the encrypted data to the client. 
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20. A system, comprising: 
a decryption downloadal|)le for deriving a key from a password and a hint; 
encrypted data; 

a hint corresponding to the encrypted data; and 
a web server for interfacimg with a client, and for sending the decryption 
downloadable, the encrypted dat|i and the hint to the client. 

Server-side decryption 

21. A client-based method, cojmprising: 
obtaining a password; 
deriving a first secret froAi the password; 

receiving a hint corresponding to data to be decrypted from a server; 

index from the first secret and the hint; and 
index to the server. 



deriving an intermediate 
sending the intermediate 



1 22. The method of claim 21 J wherein deriving the first secret includes hashing 

2 the password. 
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1 23. The method of claim 21, wherein deriving an intermediate index includes 

2 hashing the first secret and the hint. 

1 24. A system, comprising: 

2 a user interface for dbtaining a password; 

3 an index generator cWpled to the user interface for generating an 

4 intermediate index from a hint received from a server and a secret derived from the 

5 password; and 

6 a communications eniine coupled to the index generator for sending the 

7 intermediate index to the server. 

1 25. The system of claim 24 wherein the index generator generate the 

2 intermediate index by hashinglthe hint and the secret. 
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26. A system, comprising: 1 



means for obtaining a pa 
means for deriving a firs^ 



server; 



sword; 

secret from the password; 



means for receiving a hint corresponding to data to be decrypted from a 



and 



means for deriving an intermediate index from the first secret and the hint; 



means for sending the in termediate index to the server. 



1 27. The system of claim 26 J wherein the system includes code stored on a 

2 computer-readable storage medium. 
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28. The system of claim 26, Wherein the system includes code embodied in a 



carrier wave. 
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29. A server-based method, comprising: 

receiving an indication of encrypted data to be decrypted; 

transmitting to a die it a hint corresponding to the indication, and a 
decryption downloadable for deriving an intermediate index from a password and 
the hint; 

receiving the intermediate index from the client; and 



deriving a decryption 
and the intermediate index 
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key from a second secret corresponding to the user 



A system, comprising: 
a second secret corresponding to a user; 

a decryption downloadable for generating an intermediate index from a 
password and a hint; 

a web server for receiv ng an indication of encrypted data to be decrypted, 
for transmitting the decryption downloadable and a hint corresponding to the 
indication to a client, and for leceiving an intermediate index from the client; and 

a server-resident module for deriving a key for decrypting the encrypted 
data from the second secret and the intermediate index. 
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